Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-12143 (GCVE-0-2026-12143)
Vulnerability from cvelistv5 – Published: 2026-06-12 18:01 – Updated: 2026-07-23 12:08
VLAI
EPSS
VEX
Title
form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)
Summary
form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
Assigner
References
28 references
Impacted products
71 products
| Vendor | Product | Version | |
|---|---|---|---|
| form-data | form-data |
Affected:
0 , < 2.5.6
(semver)
Affected: 3.0.0 , < 3.0.5 (semver) Affected: 4.0.0 , < 4.0.6 (semver) |
|
| Red Hat | Red Hat Data Grid 8.6.2 |
cpe:/a:redhat:jboss_data_grid:8 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840519 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839981 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839193 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838753 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839279 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840539 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782841925 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782844225 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839658 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838476 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839996 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839494 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1783357116 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1783357140 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Developer Hub 1.10 |
Unaffected:
1783448184 , < *
(rpm)
cpe:/a:redhat:rhdh:1.10::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1784210921 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1781937133 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1782287580 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201894 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201833 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201696 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201537 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201851 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201812 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782231869 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782201466 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1783751865 , < *
(rpm)
Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4 |
|
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1 |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat AMQ Broker 7 |
cpe:/a:redhat:amq_broker:7 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel for Spring Boot 4 |
cpe:/a:redhat:camel_spring_boot:4 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat build of Apicurio Registry 3 |
cpe:/a:redhat:apicurio_registry:3 |
|
| Red Hat | Red Hat Build of Podman Desktop |
cpe:/a:redhat:podman_desktop:1 |
|
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview |
cpe:/a:redhat:podman_desktop:0 |
|
| Red Hat | Red Hat Discovery 2 |
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat Fuse 7 |
cpe:/a:redhat:jboss_fuse:7 |
|
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 |
cpe:/a:redhat:jboss_enterprise_application_platform:7 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 |
cpe:/a:redhat:jboss_enterprise_application_platform:8 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack |
cpe:/a:redhat:jbosseapxp |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4 |
|
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3 |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1 |
|
| Red Hat | Red Hat Trusted Profile Analyzer |
cpe:/a:redhat:trusted_profile_analyzer:2 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
Credits
yueyueL (https://github.com/yueyueL)
LJHarb (https://github.com/LJHarb)
LJHarb (https://github.com/LJHarb)
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-12143",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-12T19:04:40.604029Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-12T19:04:44.024Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "form-data",
"product": "Red Hat Data Grid 8.6.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840519",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839981",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839279",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840539",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782841925",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782844225",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839658",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838476",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839996",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839494",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357140",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783448184",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784210921",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781937133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782287580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201833",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201696",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782231869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201466",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784353904",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat-openshift-console-plugin-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "form-data",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-ui-rhel8",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "affected",
"packageName": "mta/mta-ui-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-operator-bundle",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-remediation-console-rhel8",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp21/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp22/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/system-rhel7",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel8",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel9",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "affected",
"packageName": "form-data",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "ansible-automation-platform-27/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "ansible-automation-platform/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "automation-hub",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "automation-platform-ui",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "python3x-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "python-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "form-data",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "form-data",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel8",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "affected",
"packageName": "apicurio/apicurio-registry-ui-rhel9",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "unknown",
"packageName": "rh-podman-desktop.git",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "unknown",
"packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "unknown",
"packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "unknown",
"packageName": "rhdesktop/rh-podman-desktop-ext-sandbox-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "unknown",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "gjs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unknown",
"packageName": "subscription-manager",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "cockpit-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "dotnet5.0-build-reference-packages",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "mozjs60",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "subscription-manager",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "gjs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "form-data",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "yarnpkg",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
],
"defaultStatus": "affected",
"packageName": "form-data",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "form-data",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "form-data",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/code-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unknown",
"packageName": "satellite/iop-advisor-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unknown",
"packageName": "satellite/iop-host-inventory-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unknown",
"packageName": "satellite/iop-remediations-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unknown",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/rhtas-console-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_profile_analyzer:2"
],
"defaultStatus": "affected",
"packageName": "rhtpa/rhtpa-trustification-service-rhel9",
"product": "Red Hat Trusted Profile Analyzer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "unknown",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "unknown",
"packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-12T18:01:30.362Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-93",
"description": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-23T12:08:09.179Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"name": "RHBZ#2488480",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41929"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
},
{
"lang": "en",
"value": "RHSA-2026:41929: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:42146: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:43052: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-12T19:00:57.360Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-12T18:01:30.362Z",
"value": "Made public."
}
],
"title": "form-data: form-data: Form field override via CRLF injection",
"workarounds": [
{
"lang": "en",
"value": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://www.npmjs.com/package/form-data",
"defaultStatus": "unaffected",
"packageName": "form-data",
"product": "form-data",
"programFiles": [
"lib/form_data.js"
],
"repo": "https://github.com/form-data/form-data",
"vendor": "form-data",
"versions": [
{
"lessThan": "2.5.6",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "3.0.5",
"status": "affected",
"version": "3.0.0",
"versionType": "semver"
},
{
"lessThan": "4.0.6",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "yueyueL (https://github.com/yueyueL)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "LJHarb (https://github.com/LJHarb)"
},
{
"lang": "en",
"type": "coordinator",
"value": "LJHarb (https://github.com/LJHarb)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.\u003c/p\u003e"
}
],
"value": "form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Application uses attacker-controlled input as a multipart field name or filename and forwards the generated request to a trusted backend."
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-93",
"description": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-12T18:01:30.362Z",
"orgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
"shortName": "harborist"
},
"references": [
{
"name": "GHSA-hmw2-7cc7-3qxx",
"tags": [
"vendor-advisory"
],
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"name": "Fix commit (4.0.6)",
"tags": [
"patch"
],
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"name": "Fix commit (3.0.5)",
"tags": [
"patch"
],
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"name": "Fix commit (2.5.6)",
"tags": [
"patch"
],
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"name": "npm: form-data",
"tags": [
"product"
],
"url": "https://www.npmjs.com/package/form-data"
},
{
"name": "CWE-93",
"tags": [
"technical-description"
],
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"name": "WHATWG HTML: multipart/form-data encoding algorithm",
"tags": [
"technical-description"
],
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
}
],
"title": "form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)"
}
},
"cveMetadata": {
"assignerOrgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
"assignerShortName": "harborist",
"cveId": "CVE-2026-12143",
"datePublished": "2026-06-12T18:01:30.362Z",
"dateReserved": "2026-06-12T17:33:29.185Z",
"dateUpdated": "2026-07-23T12:08:09.179Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-12143",
"date": "2026-07-25",
"epss": "0.00535",
"percentile": "0.41972"
},
"microsoft_vex": {
"current_release_date": "2026-06-23T14:51:41.000Z",
"cve": "CVE-2026-12143",
"id": "msrc_CVE-2026-12143",
"initial_release_date": "2026-06-02T00:00:00.000Z",
"product_status:known_not_affected": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-12143.json",
"version": "2"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-12143\",\"sourceIdentifier\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\",\"published\":\"2026-06-12T19:16:26.560\",\"lastModified\":\"2026-07-23T12:17:08.390\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\\\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\\\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.\"}],\"affected\":[{\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\",\"affectedData\":[{\"vendor\":\"form-data\",\"product\":\"form-data\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://www.npmjs.com/package/form-data\",\"packageName\":\"form-data\",\"programFiles\":[\"lib/form_data.js\"],\"repo\":\"https://github.com/form-data/form-data\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.5.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.0.0\",\"lessThan\":\"3.0.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.0.0\",\"lessThan\":\"4.0.6\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8.6.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840519\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839981\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839279\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782841925\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782844225\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839658\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838476\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839996\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839494\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1783357116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1783357140\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.10::el9\"],\"versions\":[{\"version\":\"1783448184\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1784210921\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1781937133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1782287580\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201833\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201696\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782231869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782201466\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1783751865\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784353904\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat/cryostat-openshift-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat-openshift-console-plugin-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-remediation-console-rhel8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp21/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp22/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel7\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel8\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel9\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-hub\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-platform-ui\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-podman-desktop.git\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-sandbox-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gjs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"subscription-manager\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cockpit-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet5.0-build-reference-packages\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mozjs60\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"subscription-manager\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"firefox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gjs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yarnpkg\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"form-data\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/code-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-advisor-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-host-inventory-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-remediations-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/rhtas-console-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Profile Analyzer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtpa/rhtpa-trustification-service-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_profile_analyzer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/bootc-automation-portal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-12T19:04:40.604029Z\",\"id\":\"CVE-2026-12143\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-93\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-93\"}]}],\"references\":[{\"url\":\"https://cwe.mitre.org/data/definitions/93.html\",\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\"},{\"url\":\"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\",\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\"},{\"url\":\"https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229\",\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\"},{\"url\":\"https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045\",\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\"},{\"url\":\"https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx\",\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\"},{\"url\":\"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data\",\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\"},{\"url\":\"https://www.npmjs.com/package/form-data\",\"source\":\"7ffcee3d-2c14-4c3e-b844-86c6a321a158\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33163\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33183\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34342\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36625\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36754\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41929\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41951\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42146\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-12143\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2488480\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-25T18:17:28+00:00",
"cve": "CVE-2026-12143",
"id": "CVE-2026-12143",
"initial_release_date": "2026-06-12T18:01:30.362000+00:00",
"product_status:fixed": "121",
"product_status:known_affected": "45",
"product_status:known_not_affected": "294",
"product_status:under_investigation": "108",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "form-data: form-data: Form field override via CRLF injection",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-01T03:36:23Z",
"cve": "CVE-2026-12143",
"id": "CVE-2026-12143",
"initial_release_date": "2026-07-01T03:36:23Z",
"product_status:known_affected": "150",
"product_status:known_not_affected": "225",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-12143",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-12143.json",
"version": "2"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"form-data: form-data: Form field override via CRLF injection\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8.6.2\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840519\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839981\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839279\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782841925\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782844225\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839658\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838476\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839996\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839494\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357140\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783448184\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784210921\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783690532\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781937133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782287580\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201833\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201696\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782231869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201466\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783751865\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784353904\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat/cryostat-openshift-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat-openshift-console-plugin-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-remediation-console-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp21/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp22/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/automation-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-hub\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-platform-ui\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"rh-podman-desktop.git\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-sandbox-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gjs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"subscription-manager\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"cockpit-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet5.0-build-reference-packages\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mozjs60\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"subscription-manager\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gjs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"yarnpkg\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"form-data\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/code-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-advisor-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-host-inventory-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-remediations-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/rhtas-console-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_profile_analyzer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Profile Analyzer\", \"packageName\": \"rhtpa/rhtpa-trustification-service-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/bootc-automation-portal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-12T19:00:57.360Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-12T18:01:30.362Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:34342: Cluster Observability Operator 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41951: Red Hat Data Grid 8.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36754: Red Hat Developer Hub 1.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41929: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42146: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43052: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-12T18:01:30.362Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-12143\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2488480\", \"name\": \"RHBZ#2488480\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36625\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41951\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36754\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41929\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33155\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33163\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33183\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42146\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \\\") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\\\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-93\", \"description\": \"Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-23T12:08:09.179Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-12143\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-12T19:04:40.604029Z\"}}}], \"references\": [{\"url\": \"https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-12T19:03:56.430Z\"}}], \"cna\": {\"title\": \"form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)\", \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"yueyueL (https://github.com/yueyueL)\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"LJHarb (https://github.com/LJHarb)\"}, {\"lang\": \"en\", \"type\": \"coordinator\", \"value\": \"LJHarb (https://github.com/LJHarb)\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 8.7, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"NONE\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"Application uses attacker-controlled input as a multipart field name or filename and forwards the generated request to a trusted backend.\"}]}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"repo\": \"https://github.com/form-data/form-data\", \"vendor\": \"form-data\", \"product\": \"form-data\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.5.6\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.0.0\", \"lessThan\": \"3.0.5\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.0.6\", \"versionType\": \"semver\"}], \"packageName\": \"form-data\", \"programFiles\": [\"lib/form_data.js\"], \"collectionURL\": \"https://www.npmjs.com/package/form-data\", \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx\", \"name\": \"GHSA-hmw2-7cc7-3qxx\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435\", \"name\": \"Fix commit (4.0.6)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229\", \"name\": \"Fix commit (3.0.5)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045\", \"name\": \"Fix commit (2.5.6)\", \"tags\": [\"patch\"]}, {\"url\": \"https://www.npmjs.com/package/form-data\", \"name\": \"npm: form-data\", \"tags\": [\"product\"]}, {\"url\": \"https://cwe.mitre.org/data/definitions/93.html\", \"name\": \"CWE-93\", \"tags\": [\"technical-description\"]}, {\"url\": \"https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data\", \"name\": \"WHATWG HTML: multipart/form-data encoding algorithm\", \"tags\": [\"technical-description\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\\\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\\\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\\\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\\\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-93\", \"description\": \"CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"7ffcee3d-2c14-4c3e-b844-86c6a321a158\", \"shortName\": \"harborist\", \"dateUpdated\": \"2026-06-12T18:01:30.362Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-12143\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-23T12:08:09.179Z\", \"dateReserved\": \"2026-06-12T17:33:29.185Z\", \"assignerOrgId\": \"7ffcee3d-2c14-4c3e-b844-86c6a321a158\", \"datePublished\": \"2026-06-12T18:01:30.362Z\", \"assignerShortName\": \"harborist\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:33183
Vulnerability from csaf_redhat - Published: 2026-06-29 17:47 - Updated: 2026-07-24 12:53Summary
Red Hat Security Advisory: Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3
Severity
Important
Notes
Topic: Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3 is now available.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.22.6, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14065)
* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14060)
* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14071)
* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14148)
* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14147)
* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14163)
* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14161)
* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14180)
* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14179)
* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14196)
* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14198)
* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14205)
* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14217)
* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14189)
* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14221)
* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14228)
* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14233)
* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14315)
* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14313)
* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14340)
* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14331)
* CVE-2026-46625 openshift-service-mesh/kiali-ossmc-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14344)
* CVE-2026-46625 openshift-service-mesh/kiali-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14345)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie's attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
References
91 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3 is now available.\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.22.6, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14065)\n* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14060)\n* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14071)\n* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14148)\n* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14147)\n* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14163)\n* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14161)\n* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14180)\n* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14179)\n* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14196)\n* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14198)\n* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14205)\n* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14217)\n* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14189)\n* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14221)\n* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14228)\n* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14233)\n* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14315)\n* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14313)\n* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14340)\n* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14331)\n* CVE-2026-46625 openshift-service-mesh/kiali-ossmc-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14344)\n* CVE-2026-46625 openshift-service-mesh/kiali-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14345)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33183",
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46625",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33183.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3",
"tracking": {
"current_release_date": "2026-07-24T12:53:37+00:00",
"generator": {
"date": "2026-07-24T12:53:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:33183",
"initial_release_date": "2026-06-29T17:47:08+00:00",
"revision_history": [
{
"date": "2026-06-29T17:47:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T12:53:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.3",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-operator-bundle@sha256%3A69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-operator-bundle\u0026tag=1782295602"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3Aa9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Aea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Abea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ab2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3Ae68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-46625",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-10T22:01:17.685570+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie\u0027s attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "RHBZ#2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020",
"url": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7",
"url": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j",
"url": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j"
}
],
"release_date": "2026-06-10T21:18:05.372000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:34342
Vulnerability from csaf_redhat - Published: 2026-07-01 14:36 - Updated: 2026-07-25 20:31Summary
Red Hat Security Advisory: Cluster Observability Operator 1.5.0
Severity
Critical
Notes
Topic: The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).
Details: The 1.5 release of COO.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the npm library trim where a specifically crafted input can cause a regular expression to take an abnormal amount of time to compute. All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) [DNP] via trim().
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Moderate
A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Moderate
A flaw was found in the NPM package `braces.` It fails to limit the number of characters it can handle, which could lead to memory exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, causing the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Important
A flaw was found in launch-editor, a tool that allows users to open files with line numbers in an editor from Node.js. Due to insufficient sanitization of the `file` argument in the `launchEditor` function, an attacker can execute arbitrary commands on Windows systems by supplying a filename that contains special characters. This can lead to a complete compromise of the affected system.
8.3 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, ".")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
77 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in proxy host matching. This vulnerability allows improper bypassing of proxy settings via manipulating an IPv6 zone ID, causing unintended matches against the NO_PROXY environment variable.
4.4 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the HTML tokenizer component. This vulnerability allows incorrect DOM construction and potential content misplacement via unquoted attribute values ending with a (/) in tags within foreign content contexts such as <math> or <svg>.
6.5 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
5.3 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.
4.3 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a "decompression bomb," during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by crafting a malicious URL with three or more parameters in a single segment, separated by non-period characters. This causes the component to generate a bad regular expression, leading to catastrophic backtracking. The overlapping capture groups can consume excessive processing resources, resulting in a Denial of Service (DoS) for the affected application.
5.3 (Medium)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Threats
Impact
Important
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Threats
Impact
Important
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.
6.5 (Medium)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.
9.8 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Critical
A flaw was found in Picomatch, a JavaScript glob matcher. This Regular Expression Denial of Service (ReDoS) vulnerability allows a remote attacker to cause excessive CPU consumption and block the Node.js event loop, leading to a denial of service. This occurs when untrusted users supply crafted extglob patterns, specifically those using quantifiers like `+()` and `*()` combined with overlapping alternatives or nested extglobs, which can trigger catastrophic backtracking in the compiled regular expressions.
6.5 (Medium)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library's Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.
9.8 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{> @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.
8.2 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.
5.4 (Medium)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
Threats
Impact
Important
References
322 references
Acknowledgments
jub0bs
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).",
"title": "Topic"
},
{
"category": "general",
"text": "The 1.5 release of COO.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34342",
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2020-7753",
"url": "https://access.redhat.com/security/cve/CVE-2020-7753"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2021-33623",
"url": "https://access.redhat.com/security/cve/CVE-2021-33623"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-4068",
"url": "https://access.redhat.com/security/cve/CVE-2024-4068"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45338",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-52011",
"url": "https://access.redhat.com/security/cve/CVE-2024-52011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22868",
"url": "https://access.redhat.com/security/cve/CVE-2025-22868"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22870",
"url": "https://access.redhat.com/security/cve/CVE-2025-22870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22872",
"url": "https://access.redhat.com/security/cve/CVE-2025-22872"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47911",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58190",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12151",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1526",
"url": "https://access.redhat.com/security/cve/CVE-2026-1526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1528",
"url": "https://access.redhat.com/security/cve/CVE-2026-1528"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-2229",
"url": "https://access.redhat.com/security/cve/CVE-2026-2229"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25680",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33228",
"url": "https://access.redhat.com/security/cve/CVE-2026-33228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33671",
"url": "https://access.redhat.com/security/cve/CVE-2026-33671"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33891",
"url": "https://access.redhat.com/security/cve/CVE-2026-33891"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33894",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33895",
"url": "https://access.redhat.com/security/cve/CVE-2026-33895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33896",
"url": "https://access.redhat.com/security/cve/CVE-2026-33896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33937",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33938",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33939",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33940",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33941",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42506",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4867",
"url": "https://access.redhat.com/security/cve/CVE-2026-4867"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6321",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6734",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9697",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/observability/cluster_observability_operator/cluster-observability-operator-release-notes.html",
"url": "https://docs.openshift.com/container-platform/latest/observability/cluster_observability_operator/cluster-observability-operator-release-notes.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34342.json"
}
],
"title": "Red Hat Security Advisory: Cluster Observability Operator 1.5.0",
"tracking": {
"current_release_date": "2026-07-25T20:31:34+00:00",
"generator": {
"date": "2026-07-25T20:31:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:34342",
"initial_release_date": "2026-07-01T14:36:53+00:00",
"revision_history": [
{
"date": "2026-07-01T14:36:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T20:31:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cluster Observability Operator 1.5.0",
"product": {
"name": "Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Cluster Observability Operator"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3A09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3Af5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-operator-bundle@sha256%3A6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle\u0026tag=1782859385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3A0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Aa4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3Af0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3A258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3A110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3Acdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3A1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3A3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3Ab93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3A475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3Adde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3Af3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Ad93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3Af1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3A9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3Ab8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3A03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3Aeb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3Aaf873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3Ae8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3Adbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3Af9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3A6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3Ae2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3Ae9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3A28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3Ab7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3Aeff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3A0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3Ad1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3Accce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3Ac47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3Ab5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3Abf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3Af9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3Abda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3A86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3Af75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3A3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Ada84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3A573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3Ac48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3Aed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3A2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3A91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3Acb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3A39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3Af396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3A7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3Abf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3Ac69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3Aaa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-7753",
"cwe": {
"id": "CWE-185",
"name": "Incorrect Regular Expression"
},
"discovery_date": "2020-10-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1891860"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the npm library trim where a specifically crafted input can cause a regular expression to take an abnormal amount of time to compute. All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) [DNP] via trim().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7753"
},
{
"category": "external",
"summary": "RHBZ#1891860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1891860"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7753",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7753"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7753",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7753"
},
{
"category": "external",
"summary": "https://github.com/component/trim/blob/master/index.js%23L6",
"url": "https://github.com/component/trim/blob/master/index.js%23L6"
},
{
"category": "external",
"summary": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132",
"url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132"
},
{
"category": "external",
"summary": "https://snyk.io/vuln/SNYK-JS-TRIM-1017038",
"url": "https://snyk.io/vuln/SNYK-JS-TRIM-1017038"
}
],
"release_date": "2020-10-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function"
},
{
"cve": "CVE-2021-33623",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2021-05-28T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1966615"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs-trim-newlines: ReDoS in .end() method",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "OpenShift Container Platform (OCP) grafana-container does package a vulnerable verison of nodejs trim-newlines. However due to the instance being read only and behind OpenShift OAuth, the impact by this vulnerability is Low. Red Hat Advanced Cluster Management for Kubernetes (ACM) containers affected by this flaw are only accessible to authenticated users, thus the impact of this vulnerability is Low. \nRed Hat Virtualization (RHV) does package a vulnerable version of nodejs-trim-newlines. However, no untrusted content is being parsed therefore the impact of this vulnerability is Low.\n\nThe hosted services are shipped with the vulnerable packages, however the vulnerable methods were not identified in use at this time.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-33623"
},
{
"category": "external",
"summary": "RHBZ#1966615",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966615"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-33623",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33623"
}
],
"release_date": "2021-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs-trim-newlines: ReDoS in .end() method"
},
{
"cve": "CVE-2024-4068",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2024-05-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2280600"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the NPM package `braces.` It fails to limit the number of characters it can handle, which could lead to memory exhaustion. In `lib/parse.js,` if a malicious user sends \"imbalanced braces\" as input, the parsing will enter a loop, causing the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "braces: fails to limit the number of characters it can handle",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-4068"
},
{
"category": "external",
"summary": "RHBZ#2280600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2280600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-4068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4068"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-4068",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4068"
},
{
"category": "external",
"summary": "https://devhub.checkmarx.com/cve-details/CVE-2024-4068/",
"url": "https://devhub.checkmarx.com/cve-details/CVE-2024-4068/"
},
{
"category": "external",
"summary": "https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308",
"url": "https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308"
},
{
"category": "external",
"summary": "https://github.com/micromatch/braces/issues/35",
"url": "https://github.com/micromatch/braces/issues/35"
}
],
"release_date": "2024-03-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "braces: fails to limit the number of characters it can handle"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
},
{
"cve": "CVE-2024-52011",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-06-01T19:04:20.806168+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in launch-editor, a tool that allows users to open files with line numbers in an editor from Node.js. Due to insufficient sanitization of the `file` argument in the `launchEditor` function, an attacker can execute arbitrary commands on Windows systems by supplying a filename that contains special characters. This can lead to a complete compromise of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-52011"
},
{
"category": "external",
"summary": "RHBZ#2483853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-52011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-52011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52011"
},
{
"category": "external",
"summary": "https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e",
"url": "https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e"
},
{
"category": "external",
"summary": "https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf",
"url": "https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf"
}
],
"release_date": "2026-06-01T17:17:43.792000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization"
},
{
"acknowledgments": [
{
"names": [
"jub0bs"
]
}
],
"cve": "CVE-2025-22868",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2025-02-26T04:00:44.350024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2348366"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, \".\")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22868"
},
{
"category": "external",
"summary": "RHBZ#2348366",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348366"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868"
},
{
"category": "external",
"summary": "https://go.dev/cl/652155",
"url": "https://go.dev/cl/652155"
},
{
"category": "external",
"summary": "https://go.dev/issue/71490",
"url": "https://go.dev/issue/71490"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3488",
"url": "https://pkg.go.dev/vuln/GO-2025-3488"
}
],
"release_date": "2025-02-26T03:07:49.012000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws"
},
{
"cve": "CVE-2025-22870",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-03-12T19:00:59.178193+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2351766"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in proxy host matching. This vulnerability allows improper bypassing of proxy settings via manipulating an IPv6 zone ID, causing unintended matches against the NO_PROXY environment variable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22870"
},
{
"category": "external",
"summary": "RHBZ#2351766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2351766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22870"
},
{
"category": "external",
"summary": "https://go.dev/cl/654697",
"url": "https://go.dev/cl/654697"
},
{
"category": "external",
"summary": "https://go.dev/issue/71984",
"url": "https://go.dev/issue/71984"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3503",
"url": "https://pkg.go.dev/vuln/GO-2025-3503"
}
],
"release_date": "2025-03-12T18:27:59.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net"
},
{
"cve": "CVE-2025-22872",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2025-04-16T18:03:27.904242+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2360404"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTML tokenizer component. This vulnerability allows incorrect DOM construction and potential content misplacement via unquoted attribute values ending with a (/) in tags within foreign content contexts such as \u003cmath\u003e or \u003csvg\u003e.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22872"
},
{
"category": "external",
"summary": "RHBZ#2360404",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2360404"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22872",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22872"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-vvgc-356p-c3xw",
"url": "https://github.com/advisories/GHSA-vvgc-356p-c3xw"
},
{
"category": "external",
"summary": "https://go.dev/cl/662715",
"url": "https://go.dev/cl/662715"
},
{
"category": "external",
"summary": "https://go.dev/issue/73070",
"url": "https://go.dev/issue/73070"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/ezSKR9vqbqA",
"url": "https://groups.google.com/g/golang-announce/c/ezSKR9vqbqA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3595",
"url": "https://pkg.go.dev/vuln/GO-2025-3595"
}
],
"release_date": "2025-04-16T17:13:02.550000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net"
},
{
"cve": "CVE-2025-47911",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-02-05T18:01:23.423406+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437109"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: The `golang.org/x/net/html` package, used across various Red Hat products, is vulnerable to a denial of service due to quadratic parsing complexity in its `html.Parse` function. An attacker providing specially crafted HTML content could exploit this flaw, leading to resource exhaustion and service unavailability in applications that process untrusted HTML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "RHBZ#2437109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4440",
"url": "https://github.com/golang/vulndb/issues/4440"
},
{
"category": "external",
"summary": "https://go.dev/cl/709876",
"url": "https://go.dev/cl/709876"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4440",
"url": "https://pkg.go.dev/vuln/GO-2026-4440"
}
],
"release_date": "2026-02-05T17:48:44.562000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html"
},
{
"cve": "CVE-2025-58190",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-02-05T18:01:26.511908+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437110"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "RHBZ#2437110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437110"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58190",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4441",
"url": "https://github.com/golang/vulndb/issues/4441"
},
{
"category": "external",
"summary": "https://go.dev/cl/709875",
"url": "https://go.dev/cl/709875"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4441",
"url": "https://pkg.go.dev/vuln/GO-2026-4441"
}
],
"release_date": "2026-02-05T17:48:44.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net"
},
{
"cve": "CVE-2026-1526",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T21:01:25.538271+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447142"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1526"
},
{
"category": "external",
"summary": "RHBZ#2447142",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447142"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc7692",
"url": "https://datatracker.ietf.org/doc/html/rfc7692"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3481206",
"url": "https://hackerone.com/reports/3481206"
}
],
"release_date": "2026-03-12T20:08:05.950000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression"
},
{
"cve": "CVE-2026-1528",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-12T21:01:36.954017+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447145"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici\u0027s ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via crafted WebSocket frame with large length",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1528"
},
{
"category": "external",
"summary": "RHBZ#2447145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1528"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3537648",
"url": "https://hackerone.com/reports/3537648"
}
],
"release_date": "2026-03-12T20:21:57.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via crafted WebSocket frame with large length"
},
{
"cve": "CVE-2026-2229",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-12T21:01:29.187989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447143"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client\u0027s Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2229"
},
{
"category": "external",
"summary": "RHBZ#2447143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447143"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc7692",
"url": "https://datatracker.ietf.org/doc/html/rfc7692"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3487486",
"url": "https://hackerone.com/reports/3487486"
},
{
"category": "external",
"summary": "https://nodejs.org/api/zlib.html#class-zlibinflateraw",
"url": "https://nodejs.org/api/zlib.html#class-zlibinflateraw"
}
],
"release_date": "2026-03-12T20:27:05.600000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4867",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T17:01:58.222137+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by crafting a malicious URL with three or more parameters in a single segment, separated by non-period characters. This causes the component to generate a bad regular expression, leading to catastrophic backtracking. The overlapping capture groups can consume excessive processing resources, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4867"
},
{
"category": "external",
"summary": "RHBZ#2451783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4867",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4867"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4867",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4867"
},
{
"category": "external",
"summary": "https://blakeembrey.com/posts/2024-09-web-redos",
"url": "https://blakeembrey.com/posts/2024-09-web-redos"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-9wv6-86v2-598j",
"url": "https://github.com/advisories/GHSA-9wv6-86v2-598j"
}
],
"release_date": "2026-03-26T16:16:25.501000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using `path-to-regexp` can implement custom regular expressions for parameters beyond the first in a single URL segment. For example, a route like `/:a-:b-:c` can be rewritten as `/:a-:b([^-/]+)-:c([^-/]+)`. Alternatively, limiting the maximum length of incoming URLs can also reduce the risk of exploitation. These changes require application-level configuration and may necessitate a service restart to take effect.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters"
},
{
"cve": "CVE-2026-6321",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-04T20:01:14.938426+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "RHBZ#2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
}
],
"release_date": "2026-05-04T19:31:57.253000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-25680",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-05-22T16:01:05.431197+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480760"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). A flaw was found in golang.org/x/net/html where parsing crafted HTML can consume excessive CPU time, leading to denial of service. Exploitation requires user interaction (a victim application parsing attacker-controlled HTML). Most Red Hat products that bundle golang.org/x/net do not use the html parser to process untrusted HTML in their supported execution paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "RHBZ#2480760",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480760"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://go.dev/cl/781702",
"url": "https://go.dev/cl/781702"
},
{
"category": "external",
"summary": "https://go.dev/issue/79573",
"url": "https://go.dev/issue/79573"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5028",
"url": "https://pkg.go.dev/vuln/GO-2026-5028"
}
],
"release_date": "2026-05-22T15:01:21.805000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse untrusted HTML content, or enforce timeouts on HTML parsing operations. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-33228",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-21T00:01:43.424803+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449872"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Critical vulnerability was discovered in \u0027flatted\u0027, a JavaScript JSON parser. It could enable a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Exploitation involves prototype pollution by providing a specially crafted JSON input. Red Hat products that process un-trusted JSON data and utilize the \u0027flatted\u0027 library are at risk if they do not properly sanitize input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33228"
},
{
"category": "external",
"summary": "RHBZ#2449872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449872"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33228",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33228"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802",
"url": "https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/releases/tag/v3.4.2",
"url": "https://github.com/WebReflection/flatted/releases/tag/v3.4.2"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh"
}
],
"release_date": "2026-03-20T23:06:48.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON."
},
{
"cve": "CVE-2026-33671",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T22:01:52.640474+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451986"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Picomatch, a JavaScript glob matcher. This Regular Expression Denial of Service (ReDoS) vulnerability allows a remote attacker to cause excessive CPU consumption and block the Node.js event loop, leading to a denial of service. This occurs when untrusted users supply crafted extglob patterns, specifically those using quantifiers like `+()` and `*()` combined with overlapping alternatives or nested extglobs, which can trigger catastrophic backtracking in the compiled regular expressions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33671"
},
{
"category": "external",
"summary": "RHBZ#2451986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451986"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33671"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33671",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33671"
},
{
"category": "external",
"summary": "https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d",
"url": "https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d"
},
{
"category": "external",
"summary": "https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj",
"url": "https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj"
}
],
"release_date": "2026-03-26T21:20:48.191000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using Picomatch should avoid passing untrusted glob patterns for compilation or matching. Implementations can disable extglob support for untrusted patterns by setting `noextglob: true` in Picomatch configurations. Alternatively, reject or sanitize patterns containing nested extglobs or specific extglob quantifiers like `+()` and `*()`. Enforcing strict allowlists for accepted pattern syntax can also reduce exposure. If the application is a service, consider running the matching process in an isolated worker or separate process with time and resource limits, and apply application-level request throttling and input validation for any endpoint that accepts glob patterns. No service restart or reload is typically required for these application-level configuration changes, but verify the specific application\u0027s behavior.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-33891",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-03-27T21:01:34.410210+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452450"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33891"
},
{
"category": "external",
"summary": "RHBZ#2452450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452450"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33891"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33891",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33891"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/9bb8d67b99d17e4ebb5fd7596cd699e11f25d023",
"url": "https://github.com/digitalbazaar/forge/commit/9bb8d67b99d17e4ebb5fd7596cd699e11f25d023"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx"
}
],
"release_date": "2026-03-27T20:43:37.725000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()"
},
{
"cve": "CVE-2026-33894",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-27T21:02:52.462999+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452464"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "RHBZ#2452464",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452464"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33894"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc2313#section-8",
"url": "https://datatracker.ietf.org/doc/html/rfc2313#section-8"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp"
},
{
"category": "external",
"summary": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE",
"url": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc8017.html",
"url": "https://www.rfc-editor.org/rfc/rfc8017.html"
}
],
"release_date": "2026-03-27T20:45:49.583000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification"
},
{
"cve": "CVE-2026-33895",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-27T21:02:18.484291+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452457"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library\u0027s Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33895"
},
{
"category": "external",
"summary": "RHBZ#2452457",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452457"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33895"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc8032#section-8.4",
"url": "https://datatracker.ietf.org/doc/html/rfc8032#section-8.4"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/bdecf11571c9f1a487cc0fe72fe78ff6dfa96b85",
"url": "https://github.com/digitalbazaar/forge/commit/bdecf11571c9f1a487cc0fe72fe78ff6dfa96b85"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw"
}
],
"release_date": "2026-03-27T20:47:54.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures"
},
{
"cve": "CVE-2026-33896",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-27T21:02:22.762233+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33896"
},
{
"category": "external",
"summary": "RHBZ#2452458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33896"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90",
"url": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25"
}
],
"release_date": "2026-03-27T20:50:03.418000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance"
},
{
"cve": "CVE-2026-33937",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:50.619819+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452523"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Handlebars that allows for Remote Code Execution. The flaw occurs when the `Handlebars.compile()` function processes a specially crafted Abstract Syntax Tree (AST) object, leading to the injection and execution of arbitrary JavaScript code. Red Hat products utilizing Handlebars are affected if they process untrusted input through the `compile()` function.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "RHBZ#2452523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452523"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33937"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q"
}
],
"release_date": "2026-03-27T21:03:46.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that any input provided to the `Handlebars.compile()` function is strictly validated to be a string type, preventing the injection of crafted Abstract Syntax Tree (AST) objects. Additionally, for deployments where templates are pre-compiled at build time, consider utilizing the Handlebars runtime-only build (`handlebars/runtime`). This build variant does not include the `compile()` function, thereby eliminating the attack vector. If the application is a service, a restart may be required for the changes to take effect.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()"
},
{
"cve": "CVE-2026-33938",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:58.504001+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452525"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{\u003e @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Handlebars allows arbitrary code execution when processing untrusted input. This occurs if an attacker can manipulate the `@partial-block` special variable through a helper, leading to the execution of a crafted Abstract Syntax Tree. Red Hat products are affected if they use Handlebars versions 4.0.0 through 4.7.8 in server-side applications where untrusted input can influence template data or context objects. Deployments utilizing the Handlebars runtime-only build are not vulnerable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "RHBZ#2452525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33938"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r"
}
],
"release_date": "2026-03-27T21:05:42.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Applications using Handlebars should implement the runtime-only build (`require(\u0027handlebars/runtime\u0027)`) to prevent exploitation, as this build lacks the vulnerable `compile()` method. Additionally, review all registered helpers to ensure they do not write arbitrary values to context objects, and avoid using third-party helpers in contexts exposed to untrusted input.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite"
},
{
"cve": "CVE-2026-33939",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-27T22:01:36.296267+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452508"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in Handlebars.js affecting applications that compile user-supplied templates without proper error handling. A remote attacker can submit a malformed template containing unregistered decorator syntax, leading to an unhandled `TypeError` and crashing the Node.js process. Red Hat products are vulnerable if they use Handlebars.js in a configuration that allows untrusted input to be compiled at runtime without implementing `try/catch` blocks or input validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "RHBZ#2452508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452508"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33939"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff"
}
],
"release_date": "2026-03-27T21:08:24.664000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing Handlebars.js should implement robust error handling during template compilation and rendering. Specifically, wrap template compilation and rendering calls in `try/catch` blocks to gracefully handle `TypeError` exceptions. Alternatively, validate user-supplied template input to reject decorator syntax (`{{*...}}`) if decorators are not actively used by the application. Employing a pre-compilation workflow, where templates are compiled at build time and only pre-compiled templates are served, can also prevent runtime exploitation. If the application is a service, a restart may be required for changes to take effect.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation"
},
{
"cve": "CVE-2026-33940",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:42.813017+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452521"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important arbitrary code execution vulnerability in Handlebars.js. The flaw can be exploited when an application uses Handlebars.js with dynamic partial lookups and processes user-controlled data within the template context. Red Hat products bundling Handlebars.js are affected if they meet these specific conditions for exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "RHBZ#2452521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452521"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6"
}
],
"release_date": "2026-03-27T21:11:10.719000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, use the runtime-only build of Handlebars.js, which prevents the fallback compilation path from being reached. Alternatively, sanitize all context data before rendering to ensure no non-primitive objects are passed to dynamic partials. Avoid dynamic partial lookups (`{{\u003e (lookup ...)}}`) when context data is user-controlled. Implementing these mitigations may require application-level changes.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context"
},
{
"cve": "CVE-2026-33941",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:54.583022+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452524"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in Handlebars allows arbitrary code execution when the CLI precompiler processes untrusted inputs. An attacker who can influence template filenames or command-line arguments can inject malicious JavaScript, which executes when the generated bundle is loaded. Red Hat products utilizing the Handlebars CLI precompiler in environments where untrusted inputs are processed may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "RHBZ#2452524",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452524"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf"
}
],
"release_date": "2026-03-27T21:13:15.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure all inputs to the Handlebars CLI precompiler are thoroughly validated, rejecting characters with JavaScript string-escaping significance (e.g., \\\" , \\\u0027 , ;). For automated build pipelines, configure a fixed and trusted namespace string via a configuration file rather than passing it through command-line arguments. Additionally, consider running the precompiler within a sandboxed environment, such as a container with restricted write access, to limit the potential impact of successful exploitation.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42506",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:02.675281+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in `golang.org/x/net/html` can lead to Cross-Site Scripting (XSS) in applications that process and render untrusted HTML, even when input sanitization is implemented. The vulnerability arises from an unexpected HTML tree structure generated during parsing, potentially allowing a remote attacker to execute arbitrary script code in the user\u0027s browser, leading to information disclosure or unauthorized actions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "RHBZ#2480759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://go.dev/cl/781700",
"url": "https://go.dev/cl/781700"
},
{
"category": "external",
"summary": "https://go.dev/issue/79571",
"url": "https://go.dev/issue/79571"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5025",
"url": "https://pkg.go.dev/vuln/GO-2026-5025"
}
],
"release_date": "2026-05-22T15:01:21.056000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse and re-render untrusted HTML content. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:36319
Vulnerability from csaf_redhat - Published: 2026-07-07 15:06 - Updated: 2026-07-25 20:57Summary
Red Hat Security Advisory: RHACS 4.9.9 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
References
146 references
Acknowledgments
Red Hat
Moritz Clasmeier
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36319",
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9165",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-499_release-notes-49",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-499_release-notes-49"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36319.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.9.9 security and bug fix update",
"tracking": {
"current_release_date": "2026-07-25T20:57:11+00:00",
"generator": {
"date": "2026-07-25T20:57:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36319",
"initial_release_date": "2026-07-07T15:06:01+00:00",
"revision_history": [
{
"date": "2026-07-07T15:06:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T20:57:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security 4.9",
"product": {
"name": "Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ace31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Ac11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3A8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Ad58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ad055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Ac8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Aaa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ad68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aa2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aa0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ab48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aa757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Afbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Aef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aedd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Abff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Moritz Clasmeier"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-9165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-05-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security is aware of this issue affecting RHACS Central. This flaw allows an authenticated user to reduce availability of the Central management component. Red Hat is not aware of malicious exploitation of this issue outside of coordinated testing. Updates addressing this issue will be released according to the RHACS support lifecycle. Refer to the associated errata when available for affected versions and update instructions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "RHBZ#2480505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165"
}
],
"release_date": "2026-07-06T08:38:30.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "There is no complete mitigation other than installing the update once\navailable.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
}
]
}
RHSA-2026:36625
Vulnerability from csaf_redhat - Published: 2026-07-08 08:08 - Updated: 2026-07-25 20:57Summary
Red Hat Security Advisory: RHACS 4.10.5 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie's attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 | — |
Workaround
|
Threats
Impact
Important
References
128 references
Acknowledgments
Red Hat
Moritz Clasmeier
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36625",
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46625",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9165",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4105_release-notes-410",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.10/html-single/release_notes/index#about-this-release-4105_release-notes-410"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36625.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.10.5 security and bug fix update",
"tracking": {
"current_release_date": "2026-07-25T20:57:13+00:00",
"generator": {
"date": "2026-07-25T20:57:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36625",
"initial_release_date": "2026-07-08T08:08:13+00:00",
"revision_history": [
{
"date": "2026-07-08T08:08:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T20:57:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product": {
"name": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel8@sha256%3A41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8\u0026tag=1782356145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3Ac77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-fact-rhel8@sha256%3A1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8\u0026tag=1782356145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Afe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aa0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Ae7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Ad048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Ac5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Af4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3Ae723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Adc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Aafeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782187369"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Ac8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Af8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aeba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357140"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357140"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.10",
"product_id": "Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security for Kubernetes 4.10"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Moritz Clasmeier"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-9165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-05-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security is aware of this issue affecting RHACS Central. This flaw allows an authenticated user to reduce availability of the Central management component. Red Hat is not aware of malicious exploitation of this issue outside of coordinated testing. Updates addressing this issue will be released according to the RHACS support lifecycle. Refer to the associated errata when available for affected versions and update instructions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "RHBZ#2480505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165"
}
],
"release_date": "2026-07-06T08:38:30.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "There is no complete mitigation other than installing the update once\navailable.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-46625",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-10T22:01:17.685570+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie\u0027s attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "RHBZ#2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020",
"url": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7",
"url": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j",
"url": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j"
}
],
"release_date": "2026-06-10T21:18:05.372000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T08:08:13+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5b5d026bb7988e258bb10d548eae2ee330f84d30be79adee00cf2646968dbaeb_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:81e9b12f2153706baceb7c05154ecb69a6c9b225130e80d20a595a91f7bc8742_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:dc3c7562e7246813f0e75f63e01af32a95abb31efc3238f01ddcaa5df483b678_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:26d4969c21b234219e20ede1b3df08fdb1250f39239f8365978d6d0002668eee_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4dae34a8dd2a3f84345fa73aa71b5d4c30629cce316973ec14e95cbcb6e249d6_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:74b47f404add83156bb601dd0b3284bf8d7e8de297f950ff00b5f18fb16c5c86_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:afeab885aca2c2b4a3794c1f342bb1c802616546709c11d2466fe664e0b0a5e5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:1f4439c3f97d81af59c66d0e9b4664925ca256ebf5cc14bedf21003b6fe30b2d_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-fact-rhel8@sha256:41cd92ebb4492161a0a2d9cd9afe8ba2a587aa63ce4fdf43d9c5f1e8705ac0e9_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5b958f96a409088346cc452d16cff16f1ed0d11f28a1443449badc5081bedc69_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:85f541d097073ced436033f3b28775941b75aaa64ac38e9377b874ff3690344b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe461141cb449e05b18df94128ada9a2ee4b283e72455cd1b4360d7a2a57ba84_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c77fd69d41cb6f1f2abd0099cb41758eadf4e96d7b1a979473232bd80788b1e4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:42ff0f634c6a3e4785ebcc9d08e792bdc86bcf53a5f1cadc915a2b02b393a197_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a0642aac46c7f16bdf83827086151f23b0e23880b316f710bdd2f5d09eae5e46_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c5dcb00a4e0d0966b2438e427933963f3a25c3e84aeb9897c620a6cc0ad055af_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:c8c8dbdda50c4db77f0ea2d011933badf07a8e7318c5b6a29b352fc342ce55f6_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:223bf9ac4c07796f59dfe5b5b4da73d755b6ae121c48514d9684ba1b65785630_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:49159080ea7587469f0ad688f9b53d5b5f8e028006031d0371eca9a03d401e3c_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:646bde20707db278d3e33a6dfad485699d0b3b9445d894d487a373cb3d56bdcb_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:f8457cf58c1a2b220a033b7b324cbb9f2173e10f8a32c35ff802fbdbadcd50bc_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8cf28b9b4d7d9ebc615bd5f20630043abe461b4d047162a92287711c3822eee9_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9f15ca532778d22bd840bb5b51ee8548c8a3fa991097e8d71899d1537b4c8387_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:eba8efa8ec40900d549d5e8071bf24ab41afcafb11b4c17d67c494c8c9f435a0_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f4a75a14e1d78a9d4fbcda5ea214395e66938a313cb1a07dd39808866992a594_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:5a90532680985ba06e52625661ff66045dbdae81c4193103ef09a9eab051acf5_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:86d8078be89cae8446bb15822cc16957aa7dce2c67425e6117df393480af3e41_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:94adcb77707adf13d73da54cb5762aea54a48b954f357a281f459afed4df7ab4_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:e7d2cb6dd9a1240674ecb8d5eae262486d95de604f2d64e61e59b9bed9cae34a_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:137e687ec8b4b32b30e7de5825fa12c428b094fb9c37c239b4ef07e7953e7614_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:7c8c3bbf81a3c4ad1d1147cd994df15e4936ba5db19fe74f8ada73115d2d5683_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:85ef92ca0b10f88e3bd660cdb2d99a08fc6166853a33b536b8d3e7b19514ee95_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:9ac38c23ef57028641ab30028677a5cc9c2bd5054dcf9dab72c3718b505d8ea3_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1f6e034c6871773f5f971dc4398f8416d83f1b745b528c61b458adad92614674_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:48d73e0709966f458056cbc9cd3eed19fb4483a597741f0fd538e36b92aa3233_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:75684c065067bde2c78f6731eabf2690e49e25793b07ce87f21d5d8fe89c9dd6_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:d048c2c56706612f38e3dbea04a8a3955ea1636b41ef3375086029950acc2fed_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:07521ebbd400ffe370c41391de255e771c82cc75f560adea2e4a2ad3f40b8a26_arm64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:57ff8c1f0a4168d757387058de77a31cc9717874d43df52bdaf763897558f38b_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:98b6c35b2f0a2cef0b110c358437bb610ba816b0902855760f8dda5eeade190b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e723ebdd59310426f51ce0cd77c72d1d2cb8e223b14d7f889f8c232356250645_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0646898c9896dfbd9151bc917670f5182879168a1e144013cefd1cc637997f2b_amd64",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:139cb19312fe9b601be3828f0f36bf73499f39f26d417805389ffa335da43714_s390x",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2507fd8df47313f86ca76070b33dc310b60540a840e664157a1d7e9c0292495c_ppc64le",
"Red Hat Advanced Cluster Security for Kubernetes 4.10:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:4c044273406544274c30d2406071a216a6e9986c836a1dc57a5d04526bf31530_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
}
]
}
RHSA-2026:36754
Vulnerability from csaf_redhat - Published: 2026-07-08 13:07 - Updated: 2026-07-25 19:07Summary
Red Hat Security Advisory: Red Hat Developer Hub 1.10.2 release.
Severity
Important
Notes
Topic: Red Hat Developer Hub 1.10.2 has been released.
Details: Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in json-2-csv. An attacker can bypass the `preventCsvInjection` option to inject malicious formulas into CSV (Comma Separated Values) files. When these manipulated CSV files are opened in spreadsheet applications, the injected formulas can execute, potentially leading to arbitrary code execution or information disclosure.
6.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by exploiting the `inspect` function. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker can exploit this vulnerability by combining specific Buffer function calls and Node.js's ERR_INVALID_ARG_TYPE error. This allows the attacker to obtain the host's TypeError constructor, leading to an escape from the sandbox. Consequently, this enables attackers to run arbitrary code on the host system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. An attacker within the sandbox could exploit incomplete symbol interception and missing security checks to gain control over the host system. This could allow the attacker to execute arbitrary code outside the sandbox environment, leading to a complete compromise of the host.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker could bypass a security check designed to prevent the combination of nested environments and disabled module loading. This bypass occurs because a strict equality check for the `require` option can be circumvented by simply omitting the option, leading to an unintended configuration. Successful exploitation of this vulnerability could allow an attacker to escape the sandbox and achieve arbitrary code execution on the host system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in vm2, a Node.js sandbox. This vulnerability allows sandboxed code to bypass network restrictions by utilizing internal HTTP built-ins, such as _http_client and _http_server. An attacker can exploit this to make outbound HTTP requests or open listening HTTP sockets, even when public network modules are explicitly denied. This could lead to unauthorized information disclosure or further compromise of the system.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows sandboxed code to bypass intended security restrictions by exploiting missing entries in the denylist for dangerous Node.js built-in functions, specifically `process` and `inspector/promises`. A remote attacker can leverage this to execute arbitrary code in the host process, leading to a complete compromise of the system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. Prior to version 3.11.4, NodeVM, a component of vm2, improperly exposed certain process-wide observability builtins, such as diagnostics_channel, async_hooks, and perf_hooks. These builtins, which are designed for monitoring and debugging, were not adequately blocked by the dangerous builtin denylist. This oversight allowed sandboxed code to observe sensitive host application data, leading to information disclosure across the vm2 security boundary.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by writing malicious code. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.
6.6 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This sandbox escape vulnerability allows an attacker to execute arbitrary code in the host process. This occurs when untrusted code is executed with asynchronous (async) support on runtimes that expose WebAssembly JavaScript Promise Integration (JSPI). Specifically, a JSPI-backed Promise can bypass expected Promise-species hardening, exposing a host-originated rejection object to attacker-controlled logic and breaking the sandbox boundary.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
References
227 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Developer Hub 1.10.2 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Developer Hub (RHDH) is Red Hat\u0027s enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36754",
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12151",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-24781",
"url": "https://access.redhat.com/security/cve/CVE-2026-24781"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47131",
"url": "https://access.redhat.com/security/cve/CVE-2026-47131"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47135",
"url": "https://access.redhat.com/security/cve/CVE-2026-47135"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47137",
"url": "https://access.redhat.com/security/cve/CVE-2026-47137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47139",
"url": "https://access.redhat.com/security/cve/CVE-2026-47139"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47140",
"url": "https://access.redhat.com/security/cve/CVE-2026-47140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47141",
"url": "https://access.redhat.com/security/cve/CVE-2026-47141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47208",
"url": "https://access.redhat.com/security/cve/CVE-2026-47208"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47210",
"url": "https://access.redhat.com/security/cve/CVE-2026-47210"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6734",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9673",
"url": "https://access.redhat.com/security/cve/CVE-2026-9673"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9697",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
"url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
},
{
"category": "external",
"summary": "https://developers.redhat.com/rhdh/overview",
"url": "https://developers.redhat.com/rhdh/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
"url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3286",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3286"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3288",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3288"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3290",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3290"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3291",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3291"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3293",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3293"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3398",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3398"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36754.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Developer Hub 1.10.2 release.",
"tracking": {
"current_release_date": "2026-07-25T19:07:42+00:00",
"generator": {
"date": "2026-07-25T19:07:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36754",
"initial_release_date": "2026-07-08T13:07:12+00:00",
"revision_history": [
{
"date": "2026-07-08T13:07:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T19:07:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Hub 1.10",
"product": {
"name": "Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhdh:1.10::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-hub-rhel9@sha256%3A61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9\u0026tag=1783448184"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-must-gather-rhel9@sha256%3Aaacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-must-gather-rhel9\u0026tag=1783447888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rhel9-operator@sha256%3A0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator\u0026tag=1783447707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-operator-bundle@sha256%3Ad4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle\u0026tag=1783453583"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rag-content-rhel9@sha256%3Abea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rag-content-rhel9\u0026tag=1783446803"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9673",
"cwe": {
"id": "CWE-1236",
"name": "Improper Neutralization of Formula Elements in a CSV File"
},
"discovery_date": "2026-05-28T06:01:00.245616+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482486"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in json-2-csv. An attacker can bypass the `preventCsvInjection` option to inject malicious formulas into CSV (Comma Separated Values) files. When these manipulated CSV files are opened in spreadsheet applications, the injected formulas can execute, potentially leading to arbitrary code execution or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate vulnerability in `json-2-csv` allows for CSV Injection due to a bypass in the `preventCsvInjection` option. While exploitation requires a user to open a specially crafted CSV file in a spreadsheet application, successful attacks could lead to arbitrary code execution or information disclosure. This affects Red Hat Developer Hub and Red Hat Ansible Automation Platform when processing untrusted data that is subsequently exported to CSV and opened by a user.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9673"
},
{
"category": "external",
"summary": "RHBZ#2482486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482486"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9673"
},
{
"category": "external",
"summary": "https://gist.github.com/whoamins/299745a2d36b482b44e9613b78e40613",
"url": "https://gist.github.com/whoamins/299745a2d36b482b44e9613b78e40613"
},
{
"category": "external",
"summary": "https://github.com/mrodrig/json-2-csv/blob/main/src/json2csv.ts%23L410",
"url": "https://github.com/mrodrig/json-2-csv/blob/main/src/json2csv.ts%23L410"
},
{
"category": "external",
"summary": "https://github.com/mrodrig/json-2-csv/commit/0fdd0bb6d0273178cd940afc323ccbce19688229",
"url": "https://github.com/mrodrig/json-2-csv/commit/0fdd0bb6d0273178cd940afc323ccbce19688229"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSON2CSV-14221326",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSON2CSV-14221326"
}
],
"release_date": "2026-05-28T05:00:02.387000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass."
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-24781",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-05-04T19:03:41.437468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466531"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by exploiting the `inspect` function. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24781"
},
{
"category": "external",
"summary": "RHBZ#2466531",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466531"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24781"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24781",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24781"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/8d30d93213c1898b3e035298b89a814970dd1189",
"url": "https://github.com/patriksimek/vm2/commit/8d30d93213c1898b3e035298b89a814970dd1189"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/bdd3d15e57bc4ec5e70365cd79f7cb0256e5f88c",
"url": "https://github.com/patriksimek/vm2/commit/bdd3d15e57bc4ec5e70365cd79f7cb0256e5f88c"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/fd266d084e0a3322d0f71ba2a8dc4c96cd030228",
"url": "https://github.com/patriksimek/vm2/commit/fd266d084e0a3322d0f71ba2a8dc4c96cd030228"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.0",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.0"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c"
}
],
"release_date": "2026-05-04T16:33:32.869000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-47131",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-06-12T15:01:52.744009+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488393"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker can exploit this vulnerability by combining specific Buffer function calls and Node.js\u0027s ERR_INVALID_ARG_TYPE error. This allows the attacker to obtain the host\u0027s TypeError constructor, leading to an escape from the sandbox. Consequently, this enables attackers to run arbitrary code on the host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox escape vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47131"
},
{
"category": "external",
"summary": "RHBZ#2488393",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488393"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47131",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47131"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47131",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47131"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f5c8",
"url": "https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f5c8"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg"
}
],
"release_date": "2026-06-12T14:14:17.037000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox escape vulnerability"
},
{
"cve": "CVE-2026-47135",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-06-12T15:02:02.154869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488396"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. An attacker within the sandbox could exploit incomplete symbol interception and missing security checks to gain control over the host system. This could allow the attacker to execute arbitrary code outside the sandbox environment, leading to a complete compromise of the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape allows arbitrary code execution on the host system",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to write cross-realm symbol keys to host objects which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47135"
},
{
"category": "external",
"summary": "RHBZ#2488396",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488396"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47135"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/928aef51898b5c52a05f05a40c4cfeb52e172878",
"url": "https://github.com/patriksimek/vm2/commit/928aef51898b5c52a05f05a40c4cfeb52e172878"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m5q2-4fm3-vfqp",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m5q2-4fm3-vfqp"
}
],
"release_date": "2026-06-12T14:14:42.022000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox escape allows arbitrary code execution on the host system"
},
{
"cve": "CVE-2026-47137",
"cwe": {
"id": "CWE-480",
"name": "Use of Incorrect Operator"
},
"discovery_date": "2026-06-12T15:01:24.611905+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488385"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker could bypass a security check designed to prevent the combination of nested environments and disabled module loading. This bypass occurs because a strict equality check for the `require` option can be circumvented by simply omitting the option, leading to an unintended configuration. Successful exploitation of this vulnerability could allow an attacker to escape the sandbox and achieve arbitrary code execution on the host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47137"
},
{
"category": "external",
"summary": "RHBZ#2488385",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488385"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47137"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-g644-9gfx-q4q4",
"url": "https://github.com/advisories/GHSA-g644-9gfx-q4q4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/01a7552add345d5a6862623884e6b79a85bf0568",
"url": "https://github.com/patriksimek/vm2/commit/01a7552add345d5a6862623884e6b79a85bf0568"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/86ab819f202c3a8dad88cef5705f2e416c5188d7",
"url": "https://github.com/patriksimek/vm2/commit/86ab819f202c3a8dad88cef5705f2e416c5188d7"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m4wx-m65x-ghrr",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m4wx-m65x-ghrr"
}
],
"release_date": "2026-06-12T14:15:34.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass"
},
{
"cve": "CVE-2026-47139",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-06-12T15:01:31.104545+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488387"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, a Node.js sandbox. This vulnerability allows sandboxed code to bypass network restrictions by utilizing internal HTTP built-ins, such as _http_client and _http_server. An attacker can exploit this to make outbound HTTP requests or open listening HTTP sockets, even when public network modules are explicitly denied. This could lead to unauthorized information disclosure or further compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to access internal HTTP built-ins which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47139"
},
{
"category": "external",
"summary": "RHBZ#2488387",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488387"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47139"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47139",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47139"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/436053e30eecbabd487e2fd2959c137ac34e2bb1",
"url": "https://github.com/patriksimek/vm2/commit/436053e30eecbabd487e2fd2959c137ac34e2bb1"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p"
}
],
"release_date": "2026-06-12T14:15:44.652000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass"
},
{
"cve": "CVE-2026-47140",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-12T15:01:11.705175+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488381"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows sandboxed code to bypass intended security restrictions by exploiting missing entries in the denylist for dangerous Node.js built-in functions, specifically `process` and `inspector/promises`. A remote attacker can leverage this to execute arbitrary code in the host process, leading to a complete compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47140"
},
{
"category": "external",
"summary": "RHBZ#2488381",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488381"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47140"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59b",
"url": "https://github.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59b"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4"
}
],
"release_date": "2026-06-12T14:16:10.727000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions"
},
{
"cve": "CVE-2026-47141",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-06-12T15:01:05.444374+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. Prior to version 3.11.4, NodeVM, a component of vm2, improperly exposed certain process-wide observability builtins, such as diagnostics_channel, async_hooks, and perf_hooks. These builtins, which are designed for monitoring and debugging, were not adequately blocked by the dangerous builtin denylist. This oversight allowed sandboxed code to observe sensitive host application data, leading to information disclosure across the vm2 security boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: NodeVM observability builtins leak host process and HTTP request data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to access process-wide observability builtins which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47141"
},
{
"category": "external",
"summary": "RHBZ#2488379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47141"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/e1c48fce05189f48e71efbd32af0754efa4066bb",
"url": "https://github.com/patriksimek/vm2/commit/e1c48fce05189f48e71efbd32af0754efa4066bb"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f"
}
],
"release_date": "2026-06-12T14:17:35.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: NodeVM observability builtins leak host process and HTTP request data"
},
{
"cve": "CVE-2026-47208",
"discovery_date": "2026-06-12T15:01:14.630546+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488382"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by writing malicious code. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox Breakout Using Promise Species",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires an attacker to supply untrusted malicious code to the vm2 sandbox, which is easily achieved since the component\u0027s main purpose is to execute untrusted code.\n\nEscaping the sandbox completely bypasses the intended security boundaries, leading directly to arbitrary code execution on the host system and a full compromise of confidentiality and integrity",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47208"
},
{
"category": "external",
"summary": "RHBZ#2488382",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488382"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47208"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47208",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47208"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/a462655009669c3124ee39498121651597529ea8",
"url": "https://github.com/patriksimek/vm2/commit/a462655009669c3124ee39498121651597529ea8"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j"
}
],
"release_date": "2026-06-12T14:16:22.726000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox Breakout Using Promise Species"
},
{
"cve": "CVE-2026-47210",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-06-12T15:01:38.846673+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488389"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This sandbox escape vulnerability allows an attacker to execute arbitrary code in the host process. This occurs when untrusted code is executed with asynchronous (async) support on runtimes that expose WebAssembly JavaScript Promise Integration (JSPI). Specifically, a JSPI-backed Promise can bypass expected Promise-species hardening, exposing a host-originated rejection object to attacker-controlled logic and breaking the sandbox boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox escape when executing untrusted code with async support.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47210"
},
{
"category": "external",
"summary": "RHBZ#2488389",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488389"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47210",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47210"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47210",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47210"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/6915fa4d9bcebd47b9a4f39a1adc1aa94ef6ffc6",
"url": "https://github.com/patriksimek/vm2/commit/6915fa4d9bcebd47b9a4f39a1adc1aa94ef6ffc6"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6j2x-vhqr-qr7q",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6j2x-vhqr-qr7q"
}
],
"release_date": "2026-06-12T14:17:22.653000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox escape when executing untrusted code with async support."
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:37577
Vulnerability from csaf_redhat - Published: 2026-07-10 05:14 - Updated: 2026-07-24 14:45Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
dotnet8.0:
* aspnetcore-runtime-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* aspnetcore-runtime-dbg-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* aspnetcore-targeting-pack-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* dotnet-apphost-pack-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* dotnet-hostfxr-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* dotnet-runtime-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* dotnet-runtime-dbg-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* dotnet-sdk-8.0-8.0.128-1.1.hum1 (aarch64, x86_64)
* dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.1.hum1 (aarch64, x86_64)
* dotnet-sdk-dbg-8.0-8.0.128-1.1.hum1 (aarch64, x86_64)
* dotnet-targeting-pack-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)
* dotnet-templates-8.0-8.0.128-1.1.hum1 (aarch64, x86_64)
* dotnet8.0-8.0.128-1.1.hum1.src (src)
Security Fix(es):
dotnet8.0:
* CVE-2026-59725
* CVE-2026-59869
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `decompress` component. An improper path containment check allows a local attacker to perform directory traversal. This vulnerability, when combined with unvalidated symlink creation, enables an attacker to write arbitrary files to directories outside the intended extraction target. This issue bypasses a previous fix for CVE-2020-12265.
6.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Socket.IO, specifically within the Engine.IO protocol v4 polling transport. An unauthenticated attacker can exploit this vulnerability by sending invalid binary POST requests with a Content-Type of application/octet-stream. This improper handling of requests prevents the HTTP response from being properly closed, which can lead to the exhaustion of server-side connections and sockets. The primary consequence is a Denial of Service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:dotnet8-0-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
33 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ndotnet8.0:\n * aspnetcore-runtime-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * aspnetcore-runtime-dbg-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * aspnetcore-targeting-pack-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * dotnet-apphost-pack-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * dotnet-hostfxr-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * dotnet-runtime-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * dotnet-runtime-dbg-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * dotnet-sdk-8.0-8.0.128-1.1.hum1 (aarch64, x86_64)\n * dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.1.hum1 (aarch64, x86_64)\n * dotnet-sdk-dbg-8.0-8.0.128-1.1.hum1 (aarch64, x86_64)\n * dotnet-targeting-pack-8.0-8.0.28-1.1.hum1 (aarch64, x86_64)\n * dotnet-templates-8.0-8.0.128-1.1.hum1 (aarch64, x86_64)\n * dotnet8.0-8.0.128-1.1.hum1.src (src)\n\nSecurity Fix(es):\n\ndotnet8.0:\n * CVE-2026-59725\n * CVE-2026-59869",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:37577",
"url": "https://access.redhat.com/errata/RHSA-2026:37577"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59725",
"url": "https://access.redhat.com/security/cve/CVE-2026-59725"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39243",
"url": "https://access.redhat.com/security/cve/CVE-2026-39243"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39245",
"url": "https://access.redhat.com/security/cve/CVE-2026-39245"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2020-12265",
"url": "https://access.redhat.com/security/cve/CVE-2020-12265"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37577.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-07-24T14:45:32+00:00",
"generator": {
"date": "2026-07-24T14:45:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:37577",
"initial_release_date": "2026-07-10T05:14:22+00:00",
"revision_history": [
{
"date": "2026-07-10T05:14:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-24T14:45:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8-0-main@aarch64",
"product": {
"name": "dotnet8-0-main@aarch64",
"product_id": "dotnet8-0-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8-0-main@x86_64",
"product": {
"name": "dotnet8-0-main@x86_64",
"product_id": "dotnet8-0-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.28-1.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet8-0-main@src",
"product": {
"name": "dotnet8-0-main@src",
"product_id": "dotnet8-0-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet8.0@8.0.128-1.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8-0-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet8-0-main@aarch64"
},
"product_reference": "dotnet8-0-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8-0-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet8-0-main@src"
},
"product_reference": "dotnet8-0-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet8-0-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet8-0-main@x86_64"
},
"product_reference": "dotnet8-0-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-39245",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-07-09T22:01:41.172349+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498814"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decompress` component. An improper path containment check allows a local attacker to perform directory traversal. This vulnerability, when combined with unvalidated symlink creation, enables an attacker to write arbitrary files to directories outside the intended extraction target. This issue bypasses a previous fix for CVE-2020-12265.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decompress: decompress: path traversal via indexOf containment bypass allows arbitrary file write (bypass of CVE-2020-12265 fix)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat\u0027s assessment aligns with the CVSSv3.1 base score of 6.2 (Moderate) published by CVE.org/CISA for this issue. The vulnerable safeMakeDir/indexOf path-containment check described in this CVE exists only in decompress 4.2.1, the final release that addressed the earlier CVE-2020-12265 path traversal issue. The decompress npm package is no longer maintained upstream and no 4.2.2 release was ever published, despite the CVE description referring to a fix in that version. Some Red Hat products bundle much older decompress releases (0.2.5, 3.0.0) that predate this code path entirely and are not affected by this specific issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39245"
},
{
"category": "external",
"summary": "RHBZ#2498814",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498814"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39245",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39245"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39245",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39245"
},
{
"category": "external",
"summary": "https://github.com/kevva/decompress",
"url": "https://github.com/kevva/decompress"
},
{
"category": "external",
"summary": "https://github.com/kevva/decompress/issues/115",
"url": "https://github.com/kevva/decompress/issues/115"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12265",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12265"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decompress",
"url": "https://www.npmjs.com/package/decompress"
}
],
"release_date": "2026-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-10T05:14:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37577"
},
{
"category": "workaround",
"details": "No upstream fix is available. The decompress package is unmaintained and no 4.2.2 release was ever published. Applications should avoid extracting untrusted archives with decompress 4.2.1, or migrate to a maintained fork such as @xhmikosr/decompress.",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "decompress: decompress: path traversal via indexOf containment bypass allows arbitrary file write (bypass of CVE-2020-12265 fix)"
},
{
"cve": "CVE-2026-59725",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-07-08T16:01:21.270461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498118"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Socket.IO, specifically within the Engine.IO protocol v4 polling transport. An unauthenticated attacker can exploit this vulnerability by sending invalid binary POST requests with a Content-Type of application/octet-stream. This improper handling of requests prevents the HTTP response from being properly closed, which can lead to the exhaustion of server-side connections and sockets. The primary consequence is a Denial of Service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been rated as Important. An unauthenticated remote attacker can exploit a vulnerability in the Engine.IO protocol v4 polling transport of Socket.IO by sending malformed binary POST requests. This can lead to server-side connection exhaustion and a denial of service, impacting the availability of applications utilizing Socket.IO.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59725"
},
{
"category": "external",
"summary": "RHBZ#2498118",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498118"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59725"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59725",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59725"
},
{
"category": "external",
"summary": "https://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671",
"url": "https://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671"
},
{
"category": "external",
"summary": "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7",
"url": "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7"
},
{
"category": "external",
"summary": "https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x",
"url": "https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x"
}
],
"release_date": "2026-07-08T15:37:52.293000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-10T05:14:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-10T05:14:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:37577"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet8-0-main@aarch64",
"Red Hat Hardened Images:dotnet8-0-main@src",
"Red Hat Hardened Images:dotnet8-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
}
]
}
RHSA-2026:40262
Vulnerability from csaf_redhat - Published: 2026-07-15 19:14 - Updated: 2026-07-25 19:05Summary
Red Hat Security Advisory: Red Hat Quay 3.9.24
Severity
Important
Notes
Topic: Red Hat Quay 3.9.24 is now available with bug fixes.
Details: Quay 3.9.24
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x | — |
Workaround
|
Threats
Impact
Important
References
188 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.9.24 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.9.24",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40262",
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40262.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.9.24",
"tracking": {
"current_release_date": "2026-07-25T19:05:28+00:00",
"generator": {
"date": "2026-07-25T19:05:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40262",
"initial_release_date": "2026-07-15T19:14:30+00:00",
"revision_history": [
{
"date": "2026-07-15T19:14:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T19:05:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.9",
"product": {
"name": "Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783750582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783748318"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Acac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783749906"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783748068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783748468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783747952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Ae7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783747905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784129592"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783748131"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784125838"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783748318"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783748068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Ab6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783747952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783747905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783748131"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784125838"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783748318"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783748068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Afdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783747952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783747905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783748131"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Af8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784125838"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T19:14:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:70cf72dcdc1e02b7c7958673e95b92503354c5e5475a1e4fc7ae0f5d3c03fbe0_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:e7eeb4f9684e32f8199b792630e21f9f13e5efe7a511664d5777dc1a98fc4207_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cac2255c18f3a8d7e67308b07ea5b3ba0317cf2e2911321b9cc4fba45c4b2583_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:3994488939804e50e226f273722d2ad3f3b6aaee6c70e52752cbc8affc36bc52_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:54cfdc97172ce2c4cef1c85b5187c3401aee0e1ba272977d099e12f59d5d4d05_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6bd95b42094007001481b27000ead5c252747f1a79fcf0801030593de163ffaf_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:8f4be0a96b74ebe660bd28e9cc15ef9cc56428532fae4ad0f04562726dcc7226_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6bdc4472dea000261ce7aa6daa850f5e1253ba716de2a247df997aaf158cf20f_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:b6109a8cab187a42f5f9f536fba1be506474eb532ad41d68f937606318e88364_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:fdec2d2556842d4c6cd4feb37243580c6323f16813754aaf02963ba1a23b7e96_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:9f2a14e20042280f51bfec86c00ac87a5309c991efc1b8b6f1dd0afb7772c297_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ae9ba588f153ed4ad2e34936867f435cc8271b2858b00c3ce823a773c640a4f6_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c51a3f7d6fc2ea1c26ba1ccfaec660d6f76cb3e656f3d1c0702d14338ded96c8_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e4fcfcd95a0db4d1da19ba16146c51237c83129719c5550977391f2978e62ef3_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:2af202af0c417c0b1bebf895cd46b15d4c6daceba48a11217f7c574a01ef5aa0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:041665ae3ee470107c533393bdf77143d70d020d4670b73b890cbe7794401f62_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:25009b47369d945141850084b0f2f303e72e8137b547de01c7b79c66141a4ad8_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:855d3b6c7ca77ef02aaa029c45e003c80ad9e1f8bd61a7d244ff475b26e6cd98_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:4732513293f2df546416fc805ea717f2b211ebe0fc5a16d8fd2c78c24ad79eba_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:c9f851e253fca208fc6dfe8ce468824ae99dfdeb1f9cfe8cb47706a64562701e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f8a741914232bb80b1b3a542ad0ba3392593b4c8f9018a63f11380afdd19ceca_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:41031
Vulnerability from csaf_redhat - Published: 2026-07-16 14:37 - Updated: 2026-07-25 19:55Summary
Red Hat Security Advisory: Red Hat Quay 3.10.24
Severity
Important
Notes
Topic: Red Hat Quay 3.10.24 is now available with bug fixes.
Details: Quay 3.10.24
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x | — |
Workaround
|
Threats
Impact
Important
References
181 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.10.24 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.10.24",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41031",
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41031.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.10.24",
"tracking": {
"current_release_date": "2026-07-25T19:55:44+00:00",
"generator": {
"date": "2026-07-25T19:55:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41031",
"initial_release_date": "2026-07-16T14:37:20+00:00",
"revision_history": [
{
"date": "2026-07-16T14:37:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T19:55:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.1",
"product": {
"name": "Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Ade47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783750794"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aa7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783749879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Acef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783750752"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Abf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783749646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Aa2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783750520"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783749793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783754116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783750939"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783750447"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783749879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Aa8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783749646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Ab1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783749793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783750939"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783750447"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783749879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Abdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783749646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750044"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783749793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783750939"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783750447"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64 as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x as a component of Red Hat Quay 3.1",
"product_id": "Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x",
"relates_to_product_reference": "Red Hat Quay 3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:37:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:91bddb7c09c65a8e9f1fc3955494962a5e45ba574fa2d3259b10a2f30a876d46_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/clair-rhel8@sha256:b1443598f34b3c99280742fd8be1144163a7c1ce45da4b4b40b31ec6b3af7156_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:cef838877d9f2a6035acaee9c03cf50c2e2db5052340394df595123137910a93_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a8934c1370a6f732a01f1a7fc24dd15acbca34920417f4527c836f120134b8b0_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bdcab3a8ad272869ef352e7e2c27d6ddbf082e3f54d757dbacb82e0a7e27b954_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bf85112b1a8131678225b7ebdde35eb830355cb36db2fd66439d4657f80883d6_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a2604092734d5e480a5b47284d72004b93ef03a6735626e219c4da09477a4e6b_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:149c9092dc8353dd81ef346954c88062eeb64ec8b42c77467dc9ced80e322823_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:79e83b8cb01e73be55a565276b66a26f9d7864d242c0b484e95b31da51c12c9e_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-builder-rhel8@sha256:ae488a9521ce2267a04605ee4a78f7af8d2a452d7c90d53082ddec1546ff5693_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:de47c8f5fedac6402e34eea1d214a3bb2b9509df89ad8ae1593b91816eec082c_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9888e7c2ee198944d6bd1c83904d017e11b1aa99c57fd34fa9acb9ce61590136_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a7641c7d809bb7715b33b0d17b278e51f4056b3859e07477ce885f82da0d17b1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c0f8fc0557259cef23bd02702e3d8074b8fe2e25595f989091ffcccb934701ba_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-bundle@sha256:23063c6e5051de1af14298ae2dcdb98831389ce9580474a43dbc8464cc5693c1_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:416d1cde3fb7a8a569bf2426644d1236275755a4e21a5be19733bf8edf3f6ba4_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:41caaea5f417d59e7041e9a9949ba9601d17ee846e74bb7e0e49672bdeb78dce_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-operator-rhel8@sha256:8de5c45c3856a9eb5cfc1ea77816bf417cfe612f55167e80526b97cdcea3a358_s390x",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:026e6519823ab3eb33c7f4d0facabca919405db20205bc87a17e2ca346938a1f_amd64",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:a110717f6fafa6978daddf5521e0b380511230b522691223fd8dd55033f547cf_ppc64le",
"Red Hat Quay 3.1:registry.redhat.io/quay/quay-rhel8@sha256:c644dd914127126a7408676c8b3f2915d8fc842c4e87e714b6207c4af3b9032d_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:41066
Vulnerability from csaf_redhat - Published: 2026-07-16 19:46 - Updated: 2026-07-25 19:02Summary
Red Hat Security Advisory: Red Hat Quay 3.16.5
Severity
Important
Notes
Topic: Red Hat Quay 3.16.5 is now available with bug fixes.
Details: Quay 3.16.5
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
References
254 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.16.5 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.16.5",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41066",
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10143",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41066.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.16.5",
"tracking": {
"current_release_date": "2026-07-25T19:02:26+00:00",
"generator": {
"date": "2026-07-25T19:02:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41066",
"initial_release_date": "2026-07-16T19:46:27+00:00",
"revision_history": [
{
"date": "2026-07-16T19:46:27+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T19:02:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.16",
"product": {
"name": "Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783749869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783749615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783748503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783961339"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ab17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Aa557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Af51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aa4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ac65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Afe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"relates_to_product_reference": "Red Hat Quay 3.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-10143",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-10T21:02:14.712750+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client\u0027s event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "RHBZ#2487722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b",
"url": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3019",
"url": "https://github.com/dpkp/kafka-python/pull/3019"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3026",
"url": "https://github.com/dpkp/kafka-python/pull/3026"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py",
"url": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py"
}
],
"release_date": "2026-06-10T20:22:39.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:41928
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-07-25 20:23Summary
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Containers (MTC) is now available.
Details: The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Moderate
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
References
448 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Containers (MTC) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The Migration Toolkit for Containers (MTC) enables you to migrate\nKubernetes resources, persistent volume data, and internal container images\nbetween OpenShift Container Platform clusters, using the MTC web console or\nthe Kubernetes API.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41928",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58754",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69227",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69228",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23745",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9595",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41928.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Migration Toolkit for Containers",
"tracking": {
"current_release_date": "2026-07-25T20:23:05+00:00",
"generator": {
"date": "2026-07-25T20:23:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41928",
"initial_release_date": "2026-07-20T08:34:29+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T08:34:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T20:23:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit 1.8",
"product": {
"name": "Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhmt:1.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-controller-rhel8@sha256%3Ac6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-controller-rhel8\u0026tag=1783953372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-hook-runner-rhel8@sha256%3A02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8\u0026tag=1783931722"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-log-reader-rhel8@sha256%3Aa95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8\u0026tag=1783914253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-must-gather-rhel8@sha256%3A7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8\u0026tag=1783914261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-openvpn-rhel8@sha256%3Af7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8\u0026tag=1783914237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rhel8-operator@sha256%3A351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rhel8-operator\u0026tag=1783969382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-operator-bundle@sha256%3A7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-operator-bundle\u0026tag=1783969793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-registry-rhel8@sha256%3A69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-registry-rhel8\u0026tag=1783914276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rsync-transfer-rhel8@sha256%3A5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8\u0026tag=1783914257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-ui-rhel8@sha256%3Ad2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-ui-rhel8\u0026tag=1783690532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-velero-plugin-for-mtc-rhel8@sha256%3Aee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8\u0026tag=1783914255"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-7783",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-07-18T17:00:43.396637+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2381959"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: Unsafe random function in form-data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "RHBZ#2381959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
"url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
}
],
"release_date": "2025-07-18T16:34:44.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "form-data: Unsafe random function in form-data"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58754",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-09-12T02:00:53.897605+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2394735"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.\nThis path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: \u0027stream\u0027.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios DoS via lack of data size check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impact is limited to the application which bundles axios and not the host Red Hat system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "RHBZ#2394735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593",
"url": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/7011",
"url": "https://github.com/axios/axios/pull/7011"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.12.0",
"url": "https://github.com/axios/axios/releases/tag/v1.12.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj"
}
],
"release_date": "2025-09-12T01:16:40.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios DoS via lack of data size check"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2025-69227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-01-06T00:01:17.036900+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via specially crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "RHBZ#2427256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259",
"url": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23"
}
],
"release_date": "2026-01-05T23:19:31.396000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via specially crafted POST request"
},
{
"cve": "CVE-2025-69228",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T00:01:02.119065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server\u0027s memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "RHBZ#2427254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60",
"url": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf"
}
],
"release_date": "2026-01-05T23:30:33.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-23745",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-16T23:01:26.508727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the node-tar library. The flaw allows an attacker to perform arbitrary file overwrite and symlink poisoning by crafting malicious tar archives. This occurs due to insufficient path sanitization of hardlink and symbolic link entries, even when the default secure behavior (preservePaths is false) is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "RHBZ#2430538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430538"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
"url": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97"
}
],
"release_date": "2026-01-16T22:00:08.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…